Privacy & Cookie Policy
Last updated: 30 June 2026
Who we are
Softy Ltd is the data controller for personal data collected through this website. If you have any questions about this policy or how we handle your data, contact us at privacy@softyltd.co.uk.
Information we collect
Contact form enquiries
When you submit the contact form, we collect your name, email address, and message. We use this to respond to your enquiry. The lawful basis is legitimate interest — we have a legitimate interest in responding to business enquiries sent to us.
Form submissions are delivered via Resend and retained for 30 days, after which they are deleted.
Analytics (with your consent)
If you accept analytics cookies, we use Google Analytics 4 (GA4) via Google Tag Manager to understand how visitors use our site. GA4 collects data including pages viewed, time spent on site, browser and device type, and approximate location (country and city level). GA4 does not collect your name, email address, or other directly identifiable information. IP addresses are processed briefly to determine approximate location and are then discarded. The lawful basis is consent.
You can withdraw consent at any time using the cookie settings link at the bottom of this page.
Cookies
We use a small number of cookies. Strictly necessary cookies are set automatically. Analytics cookies are only set with your consent.
| Cookie | Purpose | Type | Duration |
|---|---|---|---|
softy-cookie-consent | Stores your cookie consent preference | Strictly necessary | Until cleared |
_ga, _ga_* | Google Analytics — distinguishes users and sessions to measure site usage | Analytics (consent required) | Up to 2 years |
Who we share data with
We do not sell or rent your personal data. We use the following sub-processors:
- Resend — email delivery for contact form submissions
- Vercel — website hosting; processes visitor request data (IP address, request logs) in the normal course of serving the site
- Google Analytics — analytics processing, only when consent is given
Each sub-processor is bound by a Data Processing Agreement and applicable data protection law.
Resend, Vercel, and Google are based in the United States. Transfers of personal data to these providers are made under Standard Contractual Clauses (SCCs) or International Data Transfer Agreements (IDTAs) as required under UK GDPR, as set out in each provider's Data Processing Agreement.
Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data
- Object to processing based on legitimate interest
- Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk
To exercise any of these rights, email privacy@softyltd.co.uk.
Automated decision-making
We do not use your personal data for automated decision-making or profiling.
Changes to this policy
We may update this policy from time to time. The date at the top of this page shows when it was last revised. Continued use of the site after an update constitutes acceptance of the revised policy.